Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

T2Critical 85Covered by 1 source · first reported by The Hacker News at 30 Sept, 16:46 UTC

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system…

security

Sources

• T2Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication SecretsThe Hacker News30 Sept, 16:46

Vulnerabilities

• CVE-2026-73570